From c32d1bbf33bd750042cb36616d3401439b179076 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 8 Mar 2026 12:48:50 +0100 Subject: [PATCH] Bump the github-actions group with 5 updates (#8112) Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [autofix-ci/action](https://github.com/autofix-ci/action) | `1.3.2` | `1.3.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `7` | `8` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.18.0` | `6.19.2` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `3` | `4` | Updates `autofix-ci/action` from 1.3.2 to 1.3.3 - [Release notes](https://github.com/autofix-ci/action/releases) - [Commits](https://github.com/autofix-ci/action/compare/635ffb0c9798bd160680f18fd73371e355b85f27...7a166d7532b277f34e16238930461bf77f9d7ed8) Updates `actions/upload-artifact` from 6 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) Updates `actions/download-artifact` from 7 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v7...v8) Updates `docker/build-push-action` from 6.18.0 to 6.19.2 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/263435318d21b8e681c14492fe198d362a7d2c83...10e90e3645eae34f1e60eeb005ba3a3d33f178e8) Updates `actions/attest-build-provenance` from 3 to 4 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4) --- updated-dependencies: - dependency-name: autofix-ci/action dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 6.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/autofix.yml | 2 +- .github/workflows/main.yml | 24 ++++++++++++------------ 2 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index 977df7224..8c30c9691 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -38,4 +38,4 @@ jobs: - uses: mhils/add-pr-ref-in-changelog@main - - uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27 + - uses: autofix-ci/action@7a166d7532b277f34e16238930461bf77f9d7ed8 diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 93b3aa7db..9ea43fe90 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -118,7 +118,7 @@ jobs: - if: runner.os == 'Windows' run: python -u release/build.py standalone-binaries - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: binaries.${{ matrix.platform }} path: release/dist @@ -144,7 +144,7 @@ jobs: env: CI_BUILD_KEY: ${{ secrets.CI_BUILD_KEY }} - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: binaries.windows-installer path: release/dist @@ -179,7 +179,7 @@ jobs: needs: build-wheel steps: - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: binaries.wheel path: release/docker @@ -200,7 +200,7 @@ jobs: sudo dpkg -i hugo*.deb - run: ./docs/build.py - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: docs path: docs/public @@ -209,7 +209,7 @@ jobs: env: DOCS_ARCHIVE: ${{ github.ref_name }} - if: startsWith(github.ref, 'refs/tags/') - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: docs-archive path: docs/public @@ -246,7 +246,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: binaries.wheel path: release/docker @@ -283,7 +283,7 @@ jobs: - name: Build and push id: push - uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 + uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 with: context: release/docker platforms: linux/amd64,linux/arm64 @@ -292,7 +292,7 @@ jobs: tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} annotations: ${{ steps.meta.outputs.annotations }} - - uses: actions/attest-build-provenance@v3 + - uses: actions/attest-build-provenance@v4 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.push.outputs.digest }} @@ -329,22 +329,22 @@ jobs: with: args: --only-group deploy - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: docs path: docs/public - if: startsWith(github.ref, 'refs/tags/') - uses: actions/download-artifact@v7 + uses: actions/download-artifact@v8 with: name: docs-archive path: docs/archive - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: pattern: binaries.* merge-multiple: true path: release/dist - id: provenance - uses: actions/attest-build-provenance@v3 + uses: actions/attest-build-provenance@v4 with: subject-path: 'release/dist/*' - run: |